Systems Security Engineer (Principal or Senior Principal Level) (OKC)

Description

The team is in Oklahoma City, OK, within the systems engineering group of the company's aeronautics systems business, and this role may be filled at either the Principal or Senior Principal level.

The role covers systems security engineering across every phase of a system's acquisition and development lifecycle.

Start dates depend on program funding and are set only after funding is confirmed.

Posting tag: ICS Blue.

Responsibilities

• Lead system security engineering work across the full lifecycle, from acquisition through development.
• Provide technical leadership for countermeasure planning in Program Protection, Supply Chain Risk Management, and Counterfeit Parts Prevention.
• Write and update Program Protection Implementation Plans, Supply Chain Risk Management plans, and Counterfeit Prevention Plans.
• Assess supply chain vulnerabilities and risks, record your findings, and recommend mitigations and countermeasures.
• Build and refine Hardware and Software Bills of Materials, and run criticality analysis on system components.
• Track system changes that affect the supply chain.
• Review system vulnerability scans and the reports on their mitigation.
• Support supplier inquiries and audits.
• Apply systems security engineering methods and techniques to your work.
• Prepare technical documents and briefings, attend security working groups, and help with ongoing authorization, including supporting documentation and procedures.
• Work in a fast-changing environment with little direction.
• Operate comfortably within an Agile development process.
• Work with other cyber functions, company management, and executives to keep programs on track and missions assured.
• Act as technical liaison and, where needed, as external spokesperson.

Requirements

• Strong background in Program Protection, Supply Chain Risk Management, and Counterfeit Parts Prevention.
• Experience with cybersecurity engineering and implementation under US Government standards, NIST, CNSSI, and Risk Management Framework processes, policies, and guidelines.
• Principal Systems Engineer: a bachelor's degree in a STEM field and 5 years of experience, or a master's degree in a STEM field and 3 years of experience, or a PhD in a STEM field and 1 year of experience.
• Senior Principal Systems Engineer: a bachelor's degree in a STEM field and 8 years of experience, or a master's degree in a STEM field and 6 years of experience, or a doctorate in a STEM field and 4 years of experience.
• Experience with US Government system security engineering activities, including security requirements, risk assessment and management, secure architecture design, and implementation and verification.
• Experience developing, running, and managing Program Protection, Supply Chain Risk, and Counterfeit Parts Prevention plans, and performing criticality analysis on system components.
• Experience with the Risk Management Framework, System Security Plans, Assessment Reports, attack path modeling, and mitigation strategies.
• Experience overseeing and guiding junior engineers, integrated product teams, and suppliers or subcontractors through design, implementation, and test or verification.
• Ability to transfer and keep the final adjudicated US Government Secret clearance, and any required program access, within a reasonable time as the company determines. You must be in scope for the clearance or enrolled in Continuous Evaluation.
• A DoD 8140.01 qualifying certification, such as CompTIA Security+, CISSP, or a similar network or security certification.
• Preferred: experience with embedded computing environments and technologies.
• Preferred: experience with cloud computing environments and technologies.
• Preferred: experience with Model Based Systems Engineering tools such as Cameo or similar system modeling tools.
• Preferred: familiarity with DoDI 5000.02 (Operation of the Adaptive Acquisition Framework), DODI 5200.44 (Protection of Mission Critical Functions to Achieve Trusted Systems and Networks), DoDI 5000.83 (Technology and Program Protection to Maintain Technological Advantage), NIST SP 800-161 (Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations), and the DoD Program Protection Plan and Guidance.
• Preferred: experience applying agile methods to cybersecurity capabilities for embedded systems.
• Preferred: experience on a multidisciplinary team and writing technical proposals.
• Preferred: strong communication and interpersonal skills, and the ability to work with all levels of staff and management.
• Preferred: familiarity with US Government Anti-Tamper processes and implementations.
• Preferred: ability to obtain a DoD Top Secret clearance, including a Single Scope Background Investigation.

Conditions

Based in Oklahoma City, OK.

Travel is required for about 10% of the time.

A Secret clearance is required before start.

Relocation assistance may be available.

Start dates depend on program funding and are confirmed afterward.

Primary level base salary range: $102,600.00 to $153,800.00.

Secondary level base salary range: $127,900.00 to $191,900.00.

The ranges are general guidelines. The company sets base pay based on factors such as the scope of the role, your experience, education, skills, and current market conditions.

The application window is estimated at 20 days from the posting date, but it may be shortened or extended based on business needs and candidate availability.

Benefits

• Depending on the role, you may be eligible for overtime, shift differential, and a discretionary bonus on top of base pay.
• Annual bonuses reward individual contributions and let you share in company results.
• Vice President and Director roles may be eligible for Long Term Incentives.
• Health insurance, life and disability insurance, a savings plan, company-paid holidays, and paid time off for vacation and personal business.